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Amciidaieitts to the qaims 

1 Claim 1 (cuirently amended): A computer program product for efiBcieutly generating pseudo- 

2 random bits, the computer program product embodied on one or more computer readable jnediA 

3 and comprising: 

4 computer-readable program code means for providing an input value compijismgi^ 

5 r andom bits; 

6 computer-readable program code means fcr gaierating an output sequence [[ofj] 

7 comprising N pseudo-random bits using the provided <>bit input value as [[an]] ishsd exponent 

8 5 of a 1-way function G**x mod P that r^nT ipifi^f com p risins modular exponentiation modulo a 

9 safe N-tnt prime number L wherein a leiigtli in bits, C. of the liipuL valuc> \h vubAUuiliallj^ shji Iti 

10 thai^ a leng t h in bi ts . N, of tli e g e n e ittted output s eq uence and a base ^ of the modular 

11 expon^itiation is a fixed generator vahie; 

12 cnm piiter^r ^fldflhH^ pr ogram code ffl^fltiff fi^r se paratinft the N bits of the generated N-bit 

13 out put sequence into a C-hit portion an d an fN-CVbit portion: and 

1 4 computer-readable program code means jfor u^ g C selected b i ts the C-bit portion of the 

1 5 generated N-hit output sequence as the provided tciput value for a next iteration of the comput^- 

16 readaMe program code mwns for generating while usin g 4II N ' C r ejumuning bits t J he j^frj^bfe 

17 porUon of the generated >M3it oxitput sequence as pseudo-random output bits, until a desired 

1 8 number of pseudo-random output bits have been gen^ated. 

1 Claim 2 (original): The OTmputer prog^ product accordmg to Oaim 1, wherein the l-way 

2 function is based upon an assumption known as **thB discrete logarithm with short exponent" 
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3 assumption. 

Claims 3 - S (canceled) 

1 Claim 6 (cutrcntiy amended): The computer program product according to Claim 1 , wherein 

2 160 lite leumh of tlic In p ut value is 160 bito an d li^lflai a IcrtglU of the safe piiaic iiunTbcr is 

3 1024 bi ts- . 

1 Claim 7 (currently amended): The computer program product acoxdtng to Qaim 1. wherein fija 

2 greater than or enual to 160 and N ia greater th a n or equal to 1024. the IcuuJi of Uie iupul ualue> ia 

3 Ai least 100 bits and the teiiglh of die geiiuaK4l o utput sequence is At lca$L 1024 bits. 

Claim 8 (caiK^ed) 

1 Claim 9 (cufiently amended): The computer program product according to Claim 1, wherein the 

2 fN-CVbit portion is N ^ C r em aiiiug bits art c oncatenated to pseudo-random output bits 

3 pre^^ou^y generated by the computer-readable program code means fcr generating. 

1 Claim 10 (currently amended): The computer program product according to Claim I, wherein 

2 the fN-CVbit portion is N ^ C remaininii - bits uj c sel e atJ num the N bits uf the genaaicd ou^t 

3 scq J c nce as a contiguous group of CNrC) bits from the gen erated N-bit output sequCTgfi- 

Serial No. 09/753 J27 -5- RSW920000091US 1 



PAGE 7/23* RCVD AT 11/29/2005 11:08:56 AM [Eastern Sl« 



11/29/2095 11:09 4073437587 FAX PAGE 08 



1 Claim 1 1 (cuiittjtly amended): The cooiputer program product acconUng to Claim 1, wherein 

2 fhft Qsj-rVhit portion is W - G i i ^\MxAm blU Ait sclLaul Qoni llic N liiU of tlio guiuoLul output 

3 a e quecicea&a non-contiguous group of Q4£l bits jfrftm m^t^ ^^^^ sequ^ . 



1 Claim 12 (pIre^aoudy presented): The <»mputer program product acconfing to Claim 1» & 

2 conqnising oon^ter-readable program code means fbt using the desired number of generated 

3 pseudo-random bits as input to an encryption operation. 



1 Claim 13 (curraidy amwded): A system for efficiently generating pseudo-randcan bits in a 

2 corcqnjting enyiromnent, comprising: 

3 mf an? firr pm"^^"g ^" pjfcmpriaitip C random bits: 

4 means for generating an output sequence [[of]] f?"^p"<i«y! N pswdo-random bits using 

5 the provided input vahie as [[an]] a short ©sponent x of a 1-way ftmction Q**x mod Pl.tfe^ 

6 comptises co m p ris i na m odular e?cponeptiation modulo a safe ^jMbtt prime number P, wherdra 

7 length in bitA, C> uf the input value is yibstAntiall] ! sh o rter than a Itnglh in bita, Ji, of 

8 gen e rated mitpul s e quence and a base Q of the modular exponentiatiOT is a fixed generator value; 

9 means for separating the N Irits of the g enerated N^btt output sequence into a C^bjt 

10 portion and an (N-C)-bit portion: and 

1 1 means Ibr usin g C selected bits the C-bit portion of the generated N-bit output sequence 

12 as the provided input vahie for a ne^rt iteration of the means for generating while using JIN-^C 

13 remfliningbi ts the (N-CVbit portion of the generated N-bit output sequence as pseudo-random 

14 output bits, until a desired number of pscudo-tandom output bits have been generated. 
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1 Claim J4 (original); The system acconfing to Cl»m 13, wherran the 1-wayfiinc^ 

2 upoQ an assumption known as "the discrete logarithm with short exponent" assumption. 

Claims 15-17 (canceled) 

1 Claim 18 (currently amended): The system according to Claim 13, wheiwia Hit laigth of the 

2 11 41111 ujilu t i iA ICQ biu C = 160 and-ar famlh of Um safe prime numbti is lOlA bits H^q^. 

1 CUtm 19 (currently amended): The system aocordii^ to Claim 13, whereiuiLe lejiftUi of the 

2 i nput vahte £ is at least 160 [[bits]] an d the lengrii of Uie geneiaitd uuiput sequence N is at least 

3 1024 [[bHs]]. 

Claim 20 (cancded) 

1 Claim 21 (currently amended): The system according to Claim 1 3, wheran th e K G lem ainwg 

2 bits a re fN-O-bit portlon is concatraated to psoido-random output bits previously generated by 

3 the means for generating. 

1 Claim 22 (currently amended): The system according to Claim 13, wherein the H » C wiiaining 

2 l i i t ; nr* ir l r r i- * f -* " " ♦ ^ ■■ w t.; t f > r t i iii ^ i uw f j ii mI miniii i ■u.n i i t j^ta.a&/N-CV-bit portion is a 

3 contiguous group of fN-C) bits from the generated N-bit output sequence. 
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1 Claifn 23 (cufrttttJy amended): The system according to Claim 13. wherein theN -CieiuaUslng 

2 biu JUcixlc c lLJD iiii Hl i r TTliH i n f t h ' '^■' r" " ' [ ■ " ■ " '' ^ '^ ( M-n-btt portion is a non- 

3 contiguous group of rN-O bits from the gen erated N-bit nutput sequence. 

1 Claim 24 (prewousty presented): The system according to Qaim 13, finthw comprising means 

2 for using the desired numbra- of generated pseudo-random output bits as input to an encryption 

3 operation. 

1 Claim 25 (currently amended): A pi uui amm atic method for effidaitlv gaaerating pseudo- 

2 randmtt bits, comptinng the steps of: 

3 providing an input value comprisinfl C randomJbits: 

4 f^^r^tin^ an mitpiif si^iftncft (fnfll ooniyvri5gng N oaeudo-random bits using the 

5 provided C-bit input vahie as [[an ]) a short «qx>nent 5 of a 1-way fimction <y*xmod;t!that 

6 comprises com p rising modular exponentiation modulo a safe Ijibit prime number £, wherein^ 

7 lei ^ in bits, G, uf the input value is substantially ilioUu Umui a length in bits, N, o f the 

S generat e d o utpu t sequ e nce and a base Q of the modular sq)onentiation is a fixed generator value; 
9 separating the N bits erf the generated N-bit outpu t sequence into a C-bit portion and an 

10 /N-CVbit portion: and 

11 iwii nj r A t Ll t ^Lt tj d bits the C-bit portion of the genCTated Nrbit output sequence as the 

12 provided input vahie for a next iteration of the ge i ietatiug stq> vAnte u»o g alH^: - G lemaiuing 

13 bits the (K-CVbtt portion of the generated output sequence as pseudo-random output bits. 
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14 until a desired number of ps^do-random output bits have been generated. 

1 Claim 26 (original): The method accorditig to Claim 25, wherein the 1-way fiinction is based 

2 upon an assumption known as **the discrete logarithm with short exponent* assumption. 

Claims 27 - 29 (caiKeled) 

1 Claim 30 (cuTTCTtly amraded): The method according to Claim ZS^ wherein the length of the 

2 in p u t vahic is at least C= 160 [[Wts]] an d a l e ngth uf tlie safe pi hue uumbeA iA at leas t 1024 

3 mm 

Claim 31 (canceled) 

1 Claim 32 (cuirentlyatnended): The method according to Claim 25, wfaerd n tlie length o f t he 

2 i nput vahie is a t lea st 1 6 0 bHs and tti e length of di e generated output sequence is a t leas tr 1024 

3 bits Cis gneaterthan or equal to 160 aodNts greater than or^e^ 1024. 

Claim 33 (canceled) 

1 Claim 34 (cuirently amended): The method according to Claim 25, whcrdn th e W ^ C lemaimng 

2 b its ar t fP^-CVbit portion is concatenated to pseudo-random output bits previously generated by 

3 the graerating step. 
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1 Claim 35 (currently amended): The method according to Oaim 25, wherein thcK - C iwi willing 

2 hitr^ fN'^->-hit portion is ai e XixAxA Gum tht W bifa of the Bpufciaifcd ouUiul wgutuce as a 

3 contiguous group of bits from the eeoer ated N-bit output seoufiP^. 

1 Claim 36 (currently amended): The method ac«ordiiig to Claim 25, wherein the N - C lUAiauung 

2 hHiMBc iN-CVbit portion is selcctad from die !<! Uth uf Oui Mmcjalul out p ut Kcquuice as a non- 

3 contiguous group of fN-Cl bits from the generated N-hit output seauenoe. 

1 Claim 37 Qirewousfy presented): The method aocordij^ to Claim 25, further comprising the step 

2 of using the desbrcd number of generated pseudo-random output bits as input to an encryption 

3 operation. 

Claim 38 (canceled) 

1 Claim 39 (currently amCTded): An encryption system, conqjriang: 

2 iTignnfi fivr providing an input vahie oomprigir tg C fandom_bita; 

3 means for graerating an output sequence [[ofj] cgiBgdMag^ pseudo-random bits uain^ 

4 the provided fida* input vahie as [[an]] short exponent x of a 1-way fimction 0**x mofi ? th»rt 

5 comprises c o wpi ising m odular exponentiation modulo a safe N4>it prime number £, whereiira 

6 length in bi t s. C, of ttie uipul value h tubslJuLially shoiitu than a ItiigUi In tos, N, o f the 

7 gene r a t ed ouLpui sequence and a base Q of the modular exponentiatioii is a fixed generator vahie; 
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S means for seoat ^in p the N bits of the genera ted N-bit mitont seouence mto ^ C-bit 

9 portion and g n <7^-CVbit Dorrioiu 

10 means for usin a C 5cl c> cted bits the C-brt portion o f tbe generated Itbh output sequence 

11 as the provided input value for a ncKl iteration of the means for generatuig while using dlN-e 

12 re maiuuigbils the fN-CVbit tyortion of the generated N-bit output sequence as pseudo-random 

13 output bits, until a desired number of pseudorandom ouf^nit bits have been generated; and 

14 means for using the desired number of generated pseudo-random bits as input to an 

15 encryption operation. 

1 Claim 40 (original): The encryption system according to Claim 39, wherein the 1-way function 

2 is based upon an assumption known as '^the discrete logarithm with short exponent*' assumption. 

Claims 41 -43 (canceled) 

1 Claim 44 (currently amended): The encryption system according to Claim 39, wherein the length 

2 of die iupuL V due is 100 bh& duJ a Icngai ufllxe sh£t ptinu. imiiiber is 1024 bits q ^ 1^0 N ^ 

3 1024 . 

Claims 45 - 46 (canceled) 

1 Claim 47 (currently amended): The encryption system accordtag to Claim 39, wheran the-N^C 

2 lemainmg bits are (N-C)-bit portion is concatenated to pseudo-random output hhs previously 
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i generated by the means for generating. 

1 Claim 48 (new): The computer program product according to Claim 1, wherdn N is greater than 

2 or equal to (C* 6). 

1 Claim 49 (new); The system accordmg to Claim 13, wherein N is greater than or equal to (C * 

2 6), 

1 aaim50(new): The method according to Claim 25, ^erdnN is greater than or 

2 6). 

1 ClaimSl (new): The encryption system acconfing to Claim 39, wherein N is grea^ 

2 equal to (C* 6). 

1 Claim 52 (new): A programmatic method for effidently generating pseudo-random bits, 

2 comprising die st^s of: 

3 providing an N-bit ii^ut vabe in which (N-C) uppermost contiguous ones of the hits are 

4 all set to zeroes and in which C lowermost contiguous ones of the bits are random; 

5 generating an output sequence con^>ri^ng N pseudo-random bits using the provided N-bit 

6 input value as an eflEectivdy-short, C-bit exponent x of a 1-way function G**x mod P that 

7 comprises nioduiar exponentiation moddo a safe N-bit prime muxiber P, wherein a base G of the 

8 moddar exponentiaticm is a fixed generator value; 
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9 sepanstiog the K bits of the geaerated N-bft output sequence into a C-»»t portion and an 

10 (N-C)-bit portion; 

1 1 creating a new N-bit input value in which the (N-C) uppermost contiguous ones of the 

12 bits are all set to zeroes and in which the lowennost C contiguous ones of the bits are set to the 

13 C-bitportioi^and 

14 usiog the new N-Wt ivpat vahie as the provided input value fiw a next iteration of the 

15 generating step while using the (N-C>bit portion of the generated N-bit output sequence as 

16 pseudo-tandom output bits, until a deared iwinAer (^pseudo-random output bits have been 

17 generated. 
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